susilswap-fiiyf[.]pages[.]dev

Analysis of the domain susilswap-fiiyf.pages.dev, reported on July 29, 2026, indicates an active generic phishing operation with an elevated risk rating. The domain is registered through Cloudflare, Inc. and delegated to the Cloudflare name servers alexandra.ns.cloudflare.com and michael.ns.cloudflare.com. DNS resolution points to the IP address 172.66.44.99, which is part of Cloudflare’s edge network, obscuring the ultimate hosting location and complicating takedown efforts.

VirusTotal scans show that three of ninety‑one security vendors have flagged the domain as malicious, providing independent confirmation of its hostile nature. The domain is currently listed on a single security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its reputation as a threat vector. No additional intelligence such as Safe Browsing, OTX, SSL details, HTTP status codes, or page title information is available at this time, leaving the exact content and targeting mechanisms unverified.

Given the limited visibility into the page payload, defenders should assume the site is being used to harvest credentials or deliver malicious redirects. Recommended mitigation steps include immediate network‑level blocking of the domain and its resolving IP, inclusion in intrusion‑prevention signatures, and continuous monitoring for any changes in hosting or detection metrics. Because the infrastructure relies on Cloudflare’s shared services, attribution to a specific operator remains uncertain, and further forensic analysis of traffic patterns may be required to identify downstream malicious endpoints.